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A random unitary channel is one that is given by a convex combination of unitary channels. 
It is shown that the conjectures on the additivity of the minimum output entropy and the 
multiplicativity of the maximum output p-norm can be equivalcntly restated in terms of 
random unitary channels. This is done by constructing a random unitary approximation 
to a general quantum channel. This approximation can be constructed efficiently, and so 
it is also applied to the computational problem of distinguishing quantum circuits. It is 
^o ' shown that the problem of distinguishing random unitary circuits is as hard as the problem 

of distinguishing general mixed state circuits, which is complete for the class of problems 
O ■ that have quantum interactive proof systems. 

■ I. INTRODUCTION 

r~| . A quantum channel is random unitary if it can be decomposed into the probabilistic application 

C^l of one of a finite set of unitary operations. More formally, $ is random unitary if there exist unitary 

^ ■ operators Ui, . . . ,Un and a probability distribution pi, . . . ,pn such that 



o 



c^ 



^x) = Y,PiU^xu:. (1) 



►^ \ It has been shown by Gregoratti and Werner— that the random unitary channels describe exactly 

\^ ' the noise processes that can be corrected using classical information obtained by measuring the 

^^ ■ environment. For channels on qubits the random unitary channels are exactly the unital channels, 

but for larger dimensions this is not the case^i^ii^. Audenaert and Scheel have recently provided 
I ^ necessary and sufficient conditions for a channel to be random unitar}«^. Buscemi has also provided 

f~^ ■ an upper bound on the number of unitaries needed for a random unitary decomposition^, as in 

00 ! Equation ^. 

A natural question arises from this class of channels: is the additivity conjecture simplified 
when restricted to the random unitary channels? In the present paper this question is answered 
S^ . in the negative. This is done using a method to approximate an arbitrary quantum channel by a 

J^ I random unitary one. A recent survey on the additivity conjecture and a few related conjectures 

that we will also consider can be found in Ref. lZ|. One such conjecture is the question of the 
additivity of the minimum output entropy. The approximation scheme constructed here is also 
used to show that this conjecture can be restricted to the random unitary channels with no loss of 
generality, extending the results of Fukuda^ on unital channels. In addition to these results, this 
approximation scheme implies the computational hardness of distinguishing mixed-state quantum 
circuits that implement random unitary channels. 

All Hilbert spaces considered here are finite dimensional and denoted by calligraphic letters 
TC,IC, . . .. The set of all (bounded) linear operators on a space Ti. is denoted by L('H). The set of 
mixed states, or density operators, which are the positive semidefinite operators with unit trace on 
the space 7Y, is denoted T>{7i). The set D('H) is compact and convex. The extreme points of D('H) 
are called pure states, which are given by the rank-one projectors \ip)(ip\ onto states of TC. The 
notation T(7Y, /C) is used for the set of admissible maps from L('H) to L(/C). An admissible map, 
hereafter be called a channel, is one that is completely positive and trace preserving. The notation 
Ifl will be used to denote the maximally mixed state on the space Ti, i.e. /^^ = !■}{/ dim TC. 



The entropy of a quantum state p is given by S{p) = — ii plogp. This quantity can be seen as 
a measure of purity, as ranges between S{\ip){^\) = for any pure state and S{It-i) = log dim 7i 
for the maximally mixed state. A description of many of the fundamental properties of the von 
Neumann entropy can be found in Ref. y. Of particular significance here is the concavity, which is 
given by S{Y,iPiPi) > T.iViS{pi). 

The classical capacity of a single use of a channel <I> is given by the x-capacityi^>ii 

C^{^) = max [S{^{Y.P;P^)) - Y.P^^^^^P^^^] ' 
i i 

where the maximum is taken over all convex mixtures "^iPiPi of quantum states. This quantity 
is also referred to as the "one-shot" or "one-step" capacity of $. A central question in quantum 
information theory is whether is quantity is additive, i.e. does entangling inputs across multiple 



uses of the channel increase the capacity? This question was first raised in Ref. [ij, and the standing 
conjecture is that 

C^($^^)lC;,(cI>) + C^(*), (2) 

which is the statement that entangled inputs do not increase the classical information carrying 
capacity of quantum channels. 

Closely related to the additivity of the x-capacity is the question of the additivity of the min- 
imum output entropy, defined by /Sminl*^) = nihip 5(<l>(/9)), where the minimization is over all 
density operators. The additivity of this quantity, given by 

5„,in($ ®^) = 5^in(^) + 5^in(^), (3) 

was first studied by King and Ruskai^^, who attribute this conjecture to Shor. This conjecture is 
connected to the additivity of the ^-capacity by a result of Shor— that shows that both of these 
conjectures are equivalent to a third conjecture: the strong super additivity of the entanglement of 
formation. 

One potential path to resolving these conjectures lies in yet another conjecture. This is the 
conjectured multiplicativity of the maximum output p-norm, first stated by Amosov, Holevo, and 
Werner—. This conjecture involves the maximum output p-norm of a quantum channel $ G 
T(7^,/C). This quantity, for p € [1, oo) is given by 



z^b(*&) = rnax ||<l>(p)|L= max (tr|$(p) 

^ peD(W) ^ PGD(W) 



\P\h 



which is simply the p-norm of the singular values of ^{p), maximized over all inputs p. This 
is extended to the case of p = oo in the usual way by replacing the sum in the p-norm with a 
maximization over the singular values of $(p). The conjecture of Amosov, Holevo, and Werner- 
corresponding to this quantity is that it is multiplicative with respect to the tensor product of two 
channels, i.e. that 

up{^®^) = up{<!>)i^p{^). (4) 

This conjecture implies the additivity of the minimum output entropy, given in Equation ([3|), as 
the derivative of i'p{^) for p approaching one gives an expression for SminC^)- The multiplicativity 
conjecture is known to fail for any fixed p > 1—. This does not eliminate interest in this quantity, 
however, as the conjecture can be weakened to ask if, for given $,^, does there exist a sequence 
{pn} converging to one with p„ > 1 for which Equation ([!]) holds? This weakened conjecture still 
implies the additivity conjectures given by Equations ([2]) and ([3]). 



There are two main approaches to resolving these conjectures. The first of these is to consider 
restricted classes of channels for which the conjectures can be shown true, in the hope that such 
a strategy will yield some insight into the general problem. The entanglement breaking channels 
are one such class, with the additivity of the minimum output entropy shown by Shor— and the 
multiplicativity of the p-norm shown by King^^. This class of channels contains many important 
channels, such as the completely depolarizing channel. Another class of channels for which the 
additivity and multiplicativity conjectures are known to hold is the class of unital channels on 
qubits^, which is particularly interesting in the context of this paper, as the unital qubit channels 
are exactly the random unitary channels on qubits. 

The second approach taken toward resolving these conjectures is to show that they remain 
equivalent when restricted to certain classes of channels, in the hope that the restrictions will 
aid search for either a proof or a counterexample. One such equivalence, due to Fukudai^, shows 
that the conjectures on the additivity of the minimum output entropy and the multiplicativity of 
the p-norm lose no generality when they are restricted to unital channels, which are the channels 
$ G T{H,'H) satisfying ^{In) = In- The same approach is taken by Fukuda and Wol^, who 
show that, with no loss in generality, these conjectures can be restricted to two copies of the same 
channel, i.e. letting ^ = <I> in Equations ^ and ([4]). 

In the present paper we take the second approach, extending the results of Fukuda^ on unital 
channels to the random unitary case. This is done by constructing a random unitary approximation 
to an arbitrary channel in Section [Til ^-iid showing that this approximation is not too far from the 
original channel in Section IIIIl In Section IIVI it is shown how this approximation can be used to 
restrict the multiplicativity conjecture to the random unitary case. This is of less interest than the 
same result for additivity conjecture on the minimum output entropy, which appears in Section W\ 
but the argument for the p-norm case is presented first, as it is both similar to and simpler than 
the argument for the minimum output entropy. Finally, the paper concludes with a discussion of a 
circuit implementation of the approximation scheme, in Section IVTl which is used in Section [VIII to 
show that the computational problem of distinguishing two mixed state quantum circuits is made 
no easier by adding the restriction that the circuits implement random unitary transformations. 

II. RANDOM UNITARY APPROXIMATION 

Stinespring's Dilation Theorem^! states that any quantum channel $ can be written as 

$(X) = trBC/(|0)(0|(g)X)?7*, (5) 

for U a unitary operation. There are two operations in this representation that are not random 
unitary, as defined by Equation ([!]). These operations are the partial trace over the system B^ and 
the introduction of the ancillary system in the state |0). To find an approximation to <I> that is 
random unitary, we will need to deal with both of these operations. 

Fixing notation, let <I> be a completely positive and trace preserving map from L('H) to L(/C). 
Representing $ as in Equation [Sj let A be the space containing the ancillary space starting in the 
|0) state, and let B be the space that is traced out. This implies that [/ is a unitary map from 
A^HiolC^B. 

To avoid tracing out the system in the space B the partial trace may be replaced by the operation 
Nq that takes the state in B to the completely mixed state. This operation can be implemented 
as a random unitary operation as the uniform mixture of the discrete Weyl operators}^i^i2i. 
The discrete Weyl operators are also known as the generalized Pauli operators, as they are one 
generalization of the Pauli X and Z operators to higher dimensional systems. It is not difficult to 



see that for p a density matrix on /C (8) -B, 

NB{p) = {tTBp)(^iB- (6) 

This imphes that if the system to be traced out instead has Nq apphed to it, the resulting state is 
the same, up to a tensor factor of a maximally mixed state in the space B. This factor will change 
both the minimum output entropy and the maximum output j*-norm by a fixed value that will not 
affect the additivity or multiplicativity of these quantities. 

Replacing the introduction of the ancillary space A with a random unitary operation is more 
complicated. The strategy employed is to expand the input of the transformation to include the 
space A. The input state of this system will not, in general, be the desired state |0), and so an 
additional operation is needed to force this to be the case for any input that minimizes the output 
entropy. As we are only interested in the minimum output entropy and the maximum output 
p-norm, those inputs on which the resulting channel produces an output with high entropy can be 
ignored, as they will be far from those inputs that achieve the minimum (resp. maximum). 

To this end, the ideal operation to perform this forcing does not alter any input state of the 
form |0)(0| 00", but takes any orthogonal state to the completely mixed state I^^H- This operation 
is, unfortunately, not random unitary, as it is not unital. A closely related strategy that is random 
unitary is to project the input state either onto the subspace Sq = \Qi)(^7i or the orthogonal subspace 
Sq = lO)-*- (8) Ti.. This projection is then be followed by a mixing operation on the subspace Sq. 
This mixing process is be introduced first. It is given by the channel M that does not affect the 
subspace 5o but completely mixes Sq. More concretely, on a state p = qpso + (1 — l)Ps^ where 
PSo = |0)(0| (8) o" is a density operator on ^o and pgi^ a density operator on Sq, the output of M is 
given by 

M(p) = qM{ps,) + (1 - q)M{ps^) = qps, + (1 - q)is^ 

= g|0)(0| a + (1 - q)^-^^^ ® In- (7) 

The channel M can be implemented as a random unitary channel in the same way as the completely 
depolarizing channel: a uniform mixture of the discrete Weyl operators, except here these operators 
are taken over the subspace Sq. 

This channel is not exactly the desired one. If the output of M on pg± in Equation d?]) were 
the completely mixed state on AiStH and not the subspace Sq then this process would create 
an essentially error-free random unitary approximation of the original channel (for the purpose 
of minimizing the output entropy). Fortunately, the error involved at this step will be shown, 
in Lemma m to be 0(1/ dim ^), and so by taking the space A large enough we will be able to 
approximate the ideal case. 

There is one further convenient property that this mixing channel does not satisfy: it does not 
remove coherences between the subspaces ^o and Sq. If the channel M had this property, then 
an equation similar to Equation ([7]) would hold for all input states p, not just those states that 
have no entanglement between the subspaces 5*0 and Sq. This property will be essential to the 
analysis that follows, and so the additional operation that decoheres these two subspaces needs 
to be applied before the mixing operation M. This operation, D, can be implemented by leaving 
the state unchanged with probability one half and applying a unitary U with probability one half, 
where the action of U on basis states is given by 

rn-\ Jl^) ii\i)(^So, 
Un) = { 



In other words, U applies a phase of —1 to states in ^q- and does not change states in Sq. When 
U is apphed with probabihty one half the result is complete dephasing between the two subspaces. 
This can be seen by observing that this is the restriction of the completely dephasing channel, 
as considered in Ref. l25|, to a system with only two orthogonal states, which are here given by 
the subspaces Sq and Sq. Alternately, when this is applied to a density matrix expressed in the 
computational basis, the result is, by a simple calculation, the zeroing of the off-diagonal elements of 
the first row and column. When this operation, D, is applied to a density operator p G D(^ ® TC), 
the result is 

D{p) = qpso + (1 - q)ps^ = 9|0) (0| a + (1 - q)ps^ , (8) 

where psa = |0)(0| ^o" is a density operator on the subspace 5o = |0) i8)-ff, pg± is a density operator 
on Sq, and < g < 1. 

Combining Equations ([7]) and ([Ij), the output of D followed by M on a density operator p on 
A ^Tl is given by a state of the form 

(M o D){p) = qM{\0){0\ ® a) + (1 - (?)M(p5x) = q\0){0\ (g) a + {1 - q)^-A_J^ ^ /^. 

This operation M o D will be used as a way to force any input that results in a low output entropy 
to be close to the subspace Sq of inputs having the 'ancilla' space A in the desired |0) state. On 
these inputs the constructed random unitary channel will behave in a similar way to the original 
channel that is being approximated. On inputs that are far from this subspace, the resulting state 
has high entropy, and so it will not be close to a state minimizing the output entropy. As M o D 
mixes the input, conditional on the state being in the subspace Sq, this operation will be referred 
to as the conditional mixing procedure. 

Putting all of these pieces together, given a channel $(/o) = trg C/(p ® |0)(0|)[/*, the random 
unitary approximation $' is constructed as 

^'{p)=Nts{U[{MoD){p)]U*), (9) 

which, more plainly, is simply the application of the conditional mixing procedure, the unitary 
operation from a Stinespring dilation of $, and finally the completely mixing channel to the space 
that would have been traced out by $. As the composition of random unitary transformations 
remains random unitary, the channel <&' will be a random unitary channel. 

It will be useful to observe that the channel $' specified in Equation ([9]) can be used to simulate 
the channel $. This occurs when the input |0)(0| ® a, i.e. an input in the space So, is provided to 
$'. This is argued in the following proposition. 

Proposition 1. Let ^ be a quantum channel from L(7Y) to L(/C). // $' is the random unitary 
channel mapping Ij{A'Si'H) to L(/C (8) B) that is constructed from $ in Equation ([9]), then 

$'(|0)(0| ®a) = <^{a) dis- 
proof. Notice that both D and M do not affect this input: the decoherence operation D does not 
affect the state as it is in the subspace 5o and M does not affect the state by Equation ([7]). Thus, 
the output of the channel <!>' is 

$'(|0)(0| 0a) = NB {U [{M o D){\0){0\ (g, a)] U*) 
= NB{U{\0){0\(^a)U*) 
= trBiU{\0){0\®a)U*)^!B 
= $(a) (g) Ib, 
where the penultimate equality is an application of Equation ([6]). D 



Combining this proposition with Equation ([8|) that demonstrates the effect of the M o D on 
states not of this form, and the observation that applying M o D twice has no further effect than 
applying it once, the output of <!>' on an arbitrary input state p is given by 

^'{p) =p<D'(|0)(0| a) + {l-p)^'{ps^-)=vH<y)®iB + (1 -p)1>'(P5x), (10) 

where as in Equation ([8]) pgi_ is a density operator on the subspace Sq of inputs orthogonal to 
those with the state |0) on the space A. The major technical portion of the results that follow 
lies in bounding the distance from the maximally mixed state of the second term in this equation, 
from which most of the results follow. 



III. PROPERTIES OF THE CONSTRUCTED CHANNEL 

In this section some basic results on the random unitary approximation of a channel are shown. 
Throughout this section, and the following two sections $ will represent the original transformation 
and $' will represent the random unitary transformation constructed from it as in Equation ([9]). 

As a first step to showing that $' approximates $ it is shown that random unitary transforma- 
tions cannot increase the distance of a state from the completely mixed state. This lemma shows 
that the output of a random unitary transformation cannot be more pure than the input. The 
extra space B appearing in this lemma will correspond to a reference system needed for the results 
in Section IVIII 

Lemma 2. Let \\\-\\\ he a unitarily invariant norm, on 'L{A'S'B). If ^ ^ T{A,A) is random 
unitary, then for any p (^'D{A^ B) 

|||(^(g)/B)(p) -/^«)tr^p||| < |||p-/40tr^p||| 

Proof. As ^ is random unitary, let ^(X) = "^iPiUiXU* with the Ui unitary, < pi < 1, and 
J2iPi — 1- Using this decomposition 

1 1 1 (^ (» /b)(/9) - /^ (g) tr^ p| 1 1 = 1 1 1 ^ Pi(C/, (» I)p{U* ® /) - /^ (8) tr^ p| 1 1 

i 

<^P^\\\{U^(^I)p{U*®I)-iA(^trAp\\\■ 
i 

Using the fact that Uil^U,* = Ij_, and the unitary invariance of the norm, this becomes 

'^PtlWiUi ^ I){p ~ Ia ® tTA p){U* ® I)\\\ =^Pi\\\p-lA®i^Ap\\\ 

i i 

Combining these equations yields the statement of the lemma. D 

This lemma can be used to show not only that the conditional mixing procedure sends states in 
the subspace Sq of states where the ancillary space is not in the |0) state to states that are almost 
completely mixed, but that the channel $' also has this behaviour. Before doing this, however, 
the Lemma is extended to the case of the von Neumann entropy, where the proof is essentially 
identical, with the exception that the triangle inequality is replaced by concavity. 

Corollary 3. // ^ G T{A,A) is random unitary, and p G D(^), then S{p) < S{^{p)). 



Proof. Let ^(p) = "^iPiUipUl as in Lemma [2j Using this notation, and the concavity of the von 
Neumann entropy 

s{^{p)) = s{Y,p^u^pu:) > Y^P'^siUipun = Y^PiSip) = s{p), 



where the unitary invariance of the von Neumann entropy has been used in the penultimate equahty. 

D 

The next lemma shows that when the input is in the subspace ^q" the output of $' is very close 
to completely mixed. The distance measure used in the lemma is the trace norm, but this can 
be applied to the case of the maximum output p-norm due to the fact that \\p\\^j. = \\p\\i > ||p|L 
for all p (z [1, cxo]. This lemma forms a significant portion of the proof of the main results on the 
additivity and multiplicativity conjectures. 

Lemma 4. On input states p S Sq the output of <^' satisfies 

2 



^'{p) - Ia^h 



< 

tr dim A 



Proof. On input p E Sq the operation D that introduces decoherence between So and Sq has no 
effect. This implies that the output oi M o D on p is given by setting q = m Equation ([7]), which 



IS 



1 



iiA-\o){o\)0iH, 



dim A— 1 
Setting d = dim^, we can then compute the distance from the completely mixed state as 



^^-|o)(o| 



d-l 



•Ih 



d 



Ih 



tr 



/^-^|o)(o| 

d{d-l) 



< 



d-l 



+ 



d-l 



tr 



d{d-l) d{d-l) 



2 

d' 



(11) 



(12) 



Finally, by noting that the remainder of the transformation <!>' is random unitary, an application 
of Lemma [2] yields the desired bound. D 

Once again we can extend this result to the case of the von Neumann entropy. In this case 
we do not simply repeat the same method of proof, but instead extend the result to the entropy 
using the relationship between the trace distance and the entropy given by Fannes' inequality. This 
extension requires that dim^ > dim Ti, but this can be assured by considering only those dilations 
of $ with this property. In the following corollary we set m = log dim ^ for convenience, but no 
assumption is made that this value is an integer. 

Corollary 5. Let m = logdim^. If dim A > dim 7^, m > 3, and p G Sq , then 

Si^'ip)) > sClA^n) - ^. 

Proof. Let p be the state in Equation (jlip of the proof of Lemma HI This is the state after 
the conditional mixing procedure of $' has been applied to the input. For convenience, set 6 = 
\\p — Ia'S)'h\\^j.- By Equation (fT2]) . this trace distance between satisfies 6 < 2/dim^ = 2"(''"~^). 
Applying Fannes' inequality^^ (see also Ref. |9|) yields 

Sip) - SiiA^n)\ <iiogdimn®A)5-5log6 

log dim Ti. + ni m 

< — ^ ^ h 



2m-l 



2m— 1 



< 



m 



2m-3 ' 



where the first inequahty is by Fannes' inequality, and the second inequahty follows from fact that 
— xlogx is monotone for x € [0, 1/e], and 5 < 2~("^~^) < 1/e whenever m > 3. 

By Corollary [3] applying the remainder of ^' to the state p cannot decrease the entropy, as this 
portion of ^' is random unitary, and so the previous equation implies that 

S{<^'ip)) > S{p) > SiU^n) - ^^, 

as in the statement of the lemma. D 

IV. MULTIPLICATIVITY OF RANDOM UNITARY TRANSFORMATIONS 

In this section the construction of Section |lT] is used to show some results about the multiplica- 
tivity of the maximum output p-norm and random unitary channels. The main result is that, for 
p < oo, the p-norm of the tensor product of two channels is multiplicative if and only if the p-norm 
is multiplicative on the random unitary approximations to these channels. 

As a first step towards this theorem, it is shown that the random unitary channel ^' constructed 
from $ in Equation Q is a good approximation with respect to the p-norm. 

Theorem 6. // $ € T{H, K), then the random unitary $' G T{A ®7i,lC®B) satisfies 

,^. ^v{^') .^s 2dimS 

M " \\p 

Proof. For convenience, let d = dim^. The first inequality is simple: <1>'(|0)(0| ® p) = ^{p) ® Ib 
by Proposition [H and so it is clear that z/p($)||/g|| < Vp{<^'), by the multiplicativity of ||-|| with 
respect to the tensor product of states. 

To prove the second inequality let p € D(^ (g) 7i) be a state such that 

u,{^') = \\^'{p)\\^. 

Such a state exists by the compactness of T)[A®T~L). The output of ^' on p is given by Equa- 
tion ([To]) , applying the triangle inequality to this yields 



\\^\p)\\p = \\qH<y)®iB + (1 - <iW{ps^)\\p < 9||^(^) ® ^llp + (1 - 'l)\\'^'iPs^)\\p- 

Applying Lemma U] to this gives 

II ^'(P) lip < q\\Ha)®lB\l +il-q) (\\lmB\l + ^) • 

Then, as the norm || ■ || is multiplicative with respect to the tensor product of states, and || -^a: || < 
II ^11 for any state ^ G D(A^), 

H'(p)\\ <q\\<^(a)\\ ||/b|| +(l-q)(\\ljc\\ ||/b|| +^)< 11^(^^)11 Pb|| + ^- 

II ^f^ ' lip — ^11 ^ 'llpll "-"lip \ ^'Ml '^llpll "lip J I — II ^ 'llpll '-'lip ^ 

Finally, by the choice of the input p 

which completes the proof of the theorem, as Us = dim,B^'^~^. D 



With this approximation result, the main theorem on the maximum output p-norui can be 
shown. This extends part of the work done by Fukuda^ on unital channels to the random unitary 
case. 

Theorem 7. // <I>, ^ e T(W,/C) and p£ [I, oo), then 

for all sufficiently large d, where $^ is the random unitary extension of the channel ^ obtained 
by applying the construction of Section O to a Stinespring dilation of ^ using a d- dimensional 
ancillary space. 

Proof. As adding ancillary space to $' increases both dim^ and dimB, by taking d = dim^ large 
enough is can be assumed that dim^B < 2d. Let e > 0, and choose d so that 2 dim. B^~^'^/d < 
2/dVp < e. Then, as $^(|0)(0| (g) p) = $(p) O Ib by Proposition [H 



I '-'lip 



By assumption, this second quantity is multiplicative, so that 



-'B \\i-B\\ 

II "-' lip II '-' lip 



-.(^) + ^ 



where the penultimate inequality is an application of Theorem As epsilon was chosen arbitrarily, 
the multiplicativity of z^p(<l>^) for all large enough d implies the multiplicativity of i^p(<l>). D 

V. MINIMUM OUTPUT ENTROPY AND RANDOM UNITARY CHANNELS 

These results on the multiplicativity of the p-norm can be extended to the additivity of the 
minimum output entropy. This is done using a similar method of proof as the results of the previous 
section. The following theorem demonstrates that the random unitary channel $' constructed in 
Equation ([9]) forms a good approximation of the original channel <1>, from which the result on the 
additivity will follow directly. 

Theorem 8. // $ G T(?i, /C), then the random unitary <!>' G T{A ®H,JCfSiB) satisfies 

8 log dim A 



Sraini^) > 5^m(^') " logdim^ > 5^in(*) 



dim^ 



Proof. Exactly as in Theorem [6l Proposition [T] implies the first inequality, as $'(|0)(0| ® p) = 

Let /9 be a state minimizing S{^'{p)) and for convenience let 5 = 8 log dim ^/ dim ^. Equa- 
tion (llOp gives the output of $' on p. Applying the concavity of the entropy to this, we obtain 

SmU^') = S{^\p)) > qSi^a) ® Ib) + (1 - q)S{<^\ps,^)). 
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Applying Corollary [5] this becomes 

SmU^') > qSi^a) Ib) + (1 - q){S{iA®H) " 5)- 

Notice that since $' is random unitary, it is the case that ^ ® 7^ is isomorphic to fC® B. This 
implies that S{I_a^t-c) = S{IjC(g,B)- Two additional properties of the entropy will be useful: S{a (8) 
^) = S{a) + S{C) for any ^7,^ and S{0 < logdim/C = S{!ic) for ah ^ G D(/C). Using these three 
observations, in order, we find that 

SmU^') > qSma) Ib) + (1 - g)(5(/x;®e) - 5) 

= q{Sma)) + SilB)) + (1 - q)iSii,c) + ^Ub) " S) 

> qiSi^a)) + SilB)) + (1 - q)iSma)) + 5(7^) - 6) 

> Sma)) + S{Ib) - d. 

Finally, since S{Ib) = log dim ^B and 5min(^) < S{^{^)) for any ^, we have 

Smm(^') > S,nin($) + log dims - 5, 

which completes the proof of the theorem. D 

The proof that the additivity conjecture can be equivalently restricted to random unitary chan- 
nels follows from the previous theorem in a way that is identical to the proof of Theorem [71 with 
the exception that the p-norm has been replaced by the minimum output entropy. 

Theorem 9. //<I>,^ S T(W,/C), then 

5min($ ^) = 5mm(^) + 5min(^) 
Smini'^'d ® ^) = Smm($d) + 5min(^), 

for all sufficiently large d, where ^'^ is the random unitary extension of the channel obtained by 
applying the construction of Section O to Stinespring dilation for $ using an ancillary space of 
dimension d. 

Proof. Let e > 0, and choose d so that 8(logd)/(i < e. Then, as $'^(|0)(0| ® p) = ^{p) ® Ib, 

Smm(<5 ®^)> 5min($d «> ^) - logdimS. 

By assumption, this second quantity is additive, so that 

5min(^ ®^)> 5mm($d O *) - log dim S 

= 5^in($'J + 5„,in(^) - log dims 

> 5min(^) + 5min(^) - £ 

where the penultimate inequality is an application of Theorem [8j As e was chosen arbitrarily, the 
additivity of $^ for all large enough d implies the additivity of $. D 
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A direct corollary of this theorem generalizes a result of Fukuda^ on the additivity of the 
minimum output entropy of unital channels. This implies that in the search for either a proof of 
this conjecture or a counterexample to it, only random unitary channels need to be considered. 

Corollary 10. The additivity of the minimum output entropy, given by 
is true for all channels $ and ^ if and only if 

Smm(^ O ^) = 5mm(^) + 5min($) 

is true for all random unitary channels <^. 

Proof. By a result of Fukuda and Wol^ the additivity conjecture can be equivalently restricted 
to the case that ^ = $, i.e. that the two channels are the same. Applying Theorem [9] twice results 
in the statement of corollary. D 

VI. CIRCUIT CONSTRUCTIONS 

In this section an efficient circuit construction is provided for the random unitary approximation 
described in Section [Til This construction is used to extend the hardness of computationally 
distinguishing quantum circuits to the case of random unitary circuits. 

Before constructing these circuits, it will be important to specify the circuit models that are 
being used. The circuit model used to define the quantum circuit distinguishability problem is the 
mixed state quantum circuit model of Aharonov, Kitaev, and Nisan^I. Circuits in this model can 
include unitary gates as well as measurements and other non-unitary operations, but as shown in 



Ref. |27| . we may assume that all such circuits first introduce any necessary ancillary qubits, then 
perform a unitary operation, and finally trace out those qubits that are not part of the output. 
This approach is equivalent to building a circuit for the Stinespring dilation of a channel. As all 
unitary transformations can be (approximately) implemented using one and two qubit gates there 
is no loss in generality in assuming that the unitary transformations implemented in such a circuit 
are composed of gates from some finite basis of one and two qubit gates. Circuits in this model 
can represent any physically realizable quantum operation. 

The second model of quantum circuits we consider is the model of random unitary quantum 
circuits. These circuits consist of one and two qubits gates as well as random unitary gates, which 
implement a unitary gate with probability one half. More formally, the application of such a gate 
takes the state p to the state (1/2)U pU* + (l/2)p, where [/ is a one or two qubit unitary gate. This 
is an extremely simple model that does not appear to be universal for the class of transformations 
that implement random unitary operations. It is not clear what is the correct definition of the 
random unitary circuit model, and since the aim of the present paper is to prove a hardness result, 
an extremely weak definition has been chosen so that the result will apply to as large a class of 
circuit models as possible. 

One drawback of this weak model is that it is not clear that the exact construction used in 
Section [n] can be implemented. Specifically, the operation D that decoheres the subspaces Sq and 
Sq seems to require a unitary operation that cannot be decomposed into a series of one and two 
qubit gates, applied with probability one half. A similar situation occurs for the discrete Weyl 
operators on the subspace Sq. These operations can be implemented in a random unitary way in 
a more permissive circuit model, but in order to keep the hardness result on distinguishing random 
unitary circuits as general as possible, a modified construction is presented here. This modified 
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construction is built from pieces similar to those used in Section [III but the specific building blocks 
are not exactly the same. The construction in this section can also be applied to the additivity 
problems, but it is somewhat more complicated that the construction already presented. 

In order to approximate a given circuit with a random unitary circuit we once again make use of 
three components. We once again use A^, D, and M to refer to these components as they play the 
same roles as the components used in Section |TT1 though they are not exactly the same. The first 
two of these components, N the completely noisy channel and D the complete dephasing channel, 
are easy to implement as random unitary operations in the chosen circuit model. More difficult 
to implement is the channel M, which performs a function similar to the channel described by 
Equation d?]). 

The complete dephasing channel D is the channel that sets to zero all of the off-diagonal elements 
of a density matrix. This is stronger than the operation considered in Section [Til but it is easier 
to implement as a random unitary circuit. The action of this operator applied to the space A, for 
an input p on ^ (8) 7i is given by 

dimyt— 1 

Da{p)= Y1 Pi\^)i^\^Pi^ (13) 

i=0 

where the pi form a probability distribution. This operation is equivalent to measuring the space 
A in the computational basis and forgetting the result. The operation D_/[ can be implemented 
as a random unitary circuit by applying the Pauli Z operation to each qubit of A independently 
with probability 1/2, as described in Ref. [281 . This will have the effect of negating the off-diagonal 
elements of a density matrix with probability 1/2, so that the resulting state is diagonal in the 
computational basis. 

The completely noisy channel A^ is also simple to implement as a random unitary circuit. This 
channel can be realized by performing a uniform mixture of the Pauli operators on each qubit. 
This mixture can be implemented by, independently on each qubit, applying the Pauli Z operation 
with probability 1/2, followed by applying the Pauli X operation with probability 1/2, as shown 
in Ref. [23|. Intuitively, the Z operations will zero the off-diagonal elements of a density matrix 
(viewed in the computational basis), and the X operations will scramble the diagonal, resulting in 
the completely mixed state, 1/2, on each qubit. 

In Section [U the channel M was implemented as a completely depolarizing channel on the 
subspace Sq. While the same channel suffices for the circuit case, it is not clear how this can be 
implemented using only two-qubit random unitary gates. To avoid this difficulty a more compli- 
cated construction is used. This construction is intuitively the same: it does not affect states in 
the subspace 5*0 of inputs with the |0) state in the space A, and it applies depolarizing noise to 
states in the space Sq. The difference is exactly how this noise is applied. The circuit that is 
constructed will implement the operation M given by 

M(|,)(.|«,) = |^(^-^-|»)(°l + l*>*l)«^« -f'^^ (14) 

[|0)(0|(8)p ifi = 0, 

where \ijji) is a nonzero state that depends on i, the exact specification of which will not be 
significant. 

As might be expected, the transformation M can be implemented using only controlled-mixing 
operations. Before describing this implementation, notice that the controlled application of the 
completely depolarizing channel A^ to a single qubit can be described by a random unitary circuit. 
This is because the above implementation of A^ as a mixture of Pauli Z and X operations consists 
only of single qubit gates. Adding a control qubit to each of these gates results in two qubit gates, 
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FIG. 1: One stage of the mixing procedure on the ancillary qubits. The mixing operations applied to the 
qubits in the space Ti are not shown. 
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FIG. 2: Circuit performing the conditional mixing procedure M o D. The top three qubits are simulating 
the ancillary qubits of the original circuit in the space A, and the bottom two are simulating the input to 
the original circuit in the space Ti. The dashed lines separate the stages of the mixing procedure. 

which fit into the model of random unitary circuits used here. It is not clear that general controlled 
random unitary operations can be implemented as random unitary circuits in this model, but the 
only controlled operation that will be needed for this construction is the completely depolarizing 
channel. 

Let m be the number of qubits in the space A that are given as part of the input to M, i.e. 
the number of ancillary qubits used to represent the ancillary space used by the original channel. 
The implementation of M consists of m stages, with the jth stage testing that the jth qubit of the 
space A is in the |0) state, and mixing the qubits if this is not the case. An example of one stage 
of the circuit is given in Figure [TJ The jth stage consists first of an application of the controlled 
N operation from the jth qubit to each other qubit oi A'Si'H.. After these operations, stage j is 
completed by TTi — 1 further controlled A^ operations: each with the jth qubit as the target qubit 
and one of the other qubits of A as the control qubit. An example of this construction with m = 3 
is presented in Figure [2j 

Given these circuit implementations of the three channels D, A^, M, the random unitary circuit 
C that approximates a given circuit Q is constructed in exactly the same was as in Equation ([9]). 
More concretely, let Q be a circuit implementing the operation 



Q{p) = ivBUm{Q\®p)U\ 
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where the ancillary qubits are in the space A. The circuit C that approximates it is then given by 

C{p) = Ns{U[{MoDa){p)]U*). (15) 

This circuit C is given by a random unitary circuit, since it is the composition of smaller random 
unitary circuits. As the operations Z)^ and M do not affect inputs of the form |0)(0| 0/9, the proof 
of Proposition [1] holds also for the circuit case, so that 

Ci\O){O\<S)a) = Q{a)0iB. (16) 

Combining this with equation (J13p and the fact that applying D_/[ twice has no further effect, the 
output of C on an arbitrary input state p is of the form 

dimy^— 1 dim^— 1 

C{p)= Yl PiC{\i){i\®Pi)=PoQ{po)®lB+ Yl PiC{\i){i\^Pi)- (17) 

In the remainder of the paper it is shown that this construction does not significantly alter the 
distinguishability properties of quantum circuits. 

As a first step towards this, it is shown that the above circuit construction correctly implements 
the channel M described by Equation [TH Much of the proof of this lemma is similar to the proof 
of Lemma [U but the operation M considered in this section is slightly different and we also need 
to extend the lemma to the case that there is an additional reference system. This system, given 
by the space !F, is needed in the case of distinguishability, as a party attempting to distinguish 
two channels is permitted to use a portion of a larger entangled state as input to the channels. 
This can be seen from the definition of the distinguishability problem, which is given in the next 
section. 

Lemma 11. On input states of the form, \k){k\ ® p ^ Y){A®7i® T) for \k){k\ G D(^) with 
< A; < 2™ — 1, the output of C satisfies 



{C ® Ir){\k){k\ ®p)- lA»n «> trw P 



1 
< 



tr - 2™-l ' 

where m is the number of ancillary qubits used by the circuit Q. 

Proof. On input of the form \k){k\® p the decoherence operations that are applied to the qubits in 
A can be ignored, as they have no effect on qubits in a state of the computational basis. As k ^ 
at least one qubit is in the state |1), and so the controlled mixing operations in the implementation 
of the channel M will have an effect. Let the first nonzero qubit among the qubits of A be the jth 
one. The first controlled A'^ operation with nonzero control qubit that effects the jth qubit will be 
at the jth stage of the mixing process, where the jth qubit is the control qubit. As this qubit is 
not modified before this stage (as any previous qubits are in the state |0) by choice of j), the first 
m — 1 gates in the jth stage will mix the remaining qubits, so that the state after these gates is, 
using Equation ([6]) , 

|1)(1| 0/4/ (g) in (S> tTH p, 

where for notational convenience the jth qubit has been written first, and A' is the space of all 
but the jth qubit of A. The remainder of the jth stage of the mixing process consists of jtt, — 1 
controlled A^ gates with the jth qubit as the target, each controlled by one of the m — 1 qubits in 
A'. Considering the state //2™~^ on A' in the computational basis, the only term for which qubit 
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j is not mixed by these operations is the ah zero term. With this observation, the state after the 
jth stage is 



1 



2m— 1 



m-1 , |0)(0| + |1)(1| ^,, n^^/^l^^m-l> 



|1)(1| (|0)(0|r™-^ + ' '' '^' " ' {Ia' - (|0)(0 

/^ + |1)(1|0(|O)(O|)^— ^-(|0)(0|)^- ^~ 
= 7ZZ, ®In^ tr^^ p. 



In ® tin p 



This proves that the circuit implementing the channel M does so correctly, as this quantity is 
exactly the state given in Equation (I17p with the addition of tr-^ p in the reference system. 

As in the proof of Lemma HI let this state be a. Computing the distance from this state to the 
desired one, we have 



a - lAfS) In® tin p 



1 1 

tr 2 



— II jl)(l| ® (|o)(o|)«™-^ - (jO)(0|)®-||^^ - —^. 



Finally, by noting that the remainder of the circuit C is random unitary, an application of Lemma [2] 
yields the desired bound. D 

VII. QIP-COMPLETENESS OF DISTINGUISHING RANDOM UNITARY CIRCUITS 

The construction outlined in the previous section can be used to show that the problem of 
distinguishing random unitary quantum circuits is QlP-complete, where QIP is the class of prob- 
lems having quantum interactive proof systems. The basic idea is to reduce an instance of the 
quantum circuit distinguishability problem to one with random unitary circuits that has the same 
distinguishability properties. This will be done by taking the instance (Qi,Q2) and constructing 
the instance (Ci,C2) by applying the construction of Section |Vl] to each of these circuits. The 
quantum circuit distinguishability problem is given by 

Quantum Circuit Distinguishability. For constants < b < a < 2, the input consists of 
quantum circuits Qi and Q2 that implement transformations from Ti to K,. The promise problem 
is to distinguish the two cases: 

Yes II Qi - (52II0 > a, 

No ||Qi-Q2lU<^- 

This problem was introduced and shown to be complete for the complexity class QIP in Ref. l29l . 
The norm used in the definition of the problem is the diamond norm, which can be defined on a 
channel $ G T(7i,/C) by 

\m.= sup \\{^®I:f){X)\\,^, 

where the space J- has dimension at least as large as TC. A more thorough definition as well as 
some properties of this norm can be found in Ref. l30l . It may be helpful to note that the diamond 
norm of $ is just the completely bonded norm of the adjoint channel $*, where the adjoint is taken 



with respect to the Hilbert-Schmidt inner product. It is shown in Ref. |29| that the maximum of 
this norm on the difference of two completely positive transformations is achieved by a density 
matrix, and so we can restrict the supremum in the definition to T){'H (S> J~)- 

Here we consider this distinguishability problem with the added restriction that the input cir- 
cuits are random unitary circuits in the model defined in Section IVll The following theorem states 
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that the constructed circuits Ci and C2 have almost the same distinguishabiUty characteristics as 
the original circuits Qi and Q2. As the circuit distinguishability problem is defined as a promise 
problem, this theorem shows immediately that the problem of distinguishing random unitary cir- 
cuits is QlP-complete, as the construction of the circuits Ci and C2 can be performed efficiently. 

Theorem 12. For any e > 0, 

IIQi - Q2II0 < l|Ci - C2IU < WQi - Q2II0 + e, 

where the circuits Ci and C2 use 0(log 1/e) ancillary qubits. 

Proof. The first inequality is not hard to show. Once again, if the state (|0)(0|)'^™ (8) p is given 
as input to the circuit Ci, then by Equation [T6l the output is a simulation of Qi, so that the 
distinguishability of Qi and Q2 cannot be greater than the distinguishability of Ci and C2. More 
formally, note that 

||Ql-<52|lo= sup \\{Ql0l^){p)-{Q2(^I^){p)\\tr^ 

and fix (5 > and p as a state achieving a value within 5 of this supremum. By Equation 1 161 if the 
state (|0)(0|)®'" (8) p is given as input to the circuit Cj, then the output is given by {Qi ® Ijr){p). 
Using this we have 

||Ci-C2|U>||(Ci®/^)((|O)(or"0p)-(C2 0/^)((|O)(or'"0p)||^^ 

= \\{Qi®lT){p)-{Q2<^Ir){p)K 
> \\Qi-Q2\\o-s. 

Since this is true for any 5 > 0, it must be the case that \\Qi — (52 Ho < l|C'i — C2\\^- 

The second inequality requires somewhat more work. Let m be the number of ancillary qubits 
and let n be the number of input qubits used by the circuits Qi, so that m = flog dim ^] and 
n = [log dim 7^]. Without loss of generality let 2~^"^~^' < e, by adding at most 3 + log(l/e) extra 
(unused) ancillary qubits to Qi and Q2- Let p £ 'D{A <Si H <?) J^) be a state such that 



\Ci - C2IU - e/2 < ||(Ci 0/^)(p) - (C2 0/^)(p)| 



tr ' 



and note that the reference system J^ need not have the same dimension as the space of the same 
name considered in the proof of the previous inequality. The first gates applied in the circuit Ci are 
the decoherence gates applied to A. These gates produce a state of the form J2i=o~ PjN)(^I '^ ^ii 
and since applying these gates twice has no further effect, the output of the circuits Ci and C2 is 
the same on p as it is on this state. Applying the triangle inequality, the quantity of interest is 

2^-1 

\\Ci - C2IU - e/2 < Y. Pi IK*^! ® ^^)(N)(^I ® ^^) - iC2 ^ I^mm ® a,) II,, (18) 

Then, by applying Lemma [TT] to each term with i ^ the states in the norm can be replaced 
with completely mixed states on A ^Tl plus a small correction factor. Doing this for each of these 
terms we have 

Pi II (Ci ® I:F){\i){i\ <8 (Ti) - (C2 ® I:F){\i){i\ <8 (^i) Iltr 
2 



<Pi 



om.— 1 
im— 2 



+ 



Ia<S)'H (^ ^m 0"j - Ia^H (^ ^m o-j 



tr 



Pi/2"'-' < p,e/2. 
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Applying this to Equation p8]) we have 



2™-! 



II Ci - C2 \l - e/2 < po II {Ci ® /^)(|0)(0| ® do) - (C2 ® /^)(|0) (0| ao) ||t, + X] ^^^/2- 

By Equation [16] the output of the circuit Ci on this input can be replaced the output of the circuit 
Qi and a maximally mixed state. When this is done to the previous equation, the desired bound 
is given by 

||Ci - C2 \l < po II (Qi ® I^){ao) - {Q2 ^ I^){<yo) lltr + (1 - Po)e/2 + e/2 < ||Qi - Q2 lU + e- 
This completes the proof of the theorem, as < po ^ 1- D 

VIII. CONCLUSION 

A method for approximating a quantum channel with one that is random unitary has been pro- 
vided. This approximation yields the equivalence of several important problems when restricted to 
random unitary channels. These results raise the open problem of how far these equivalences ex- 
tend. What other problems can be restricted to the random unitary case without loss of generality, 
and what problems are simplified when restricted to this class of channels? 
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